you can have a relationship exist iff the subject is not accessing from a disallowed IP range